2_antiban[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
2_antiban.zip
Size 217KB
Sample260731-plc8msae98
SHA256 c54e2f49e9a1359333873daf124cb22dea99a73da31d1189d1ea0d1fcc92c521
MD5 463e0a4d66bd8063c0774af37002aad0
SHA1 efadd2fc446e1811b26b13fa382831ea6fdb3771
SHA512 07a2d56c4c9379dd48742e695275196289158043c620443297b2298e68f518a2764831f126252478254c572ec83f1c0fb609722fff68b09b9e9a1d7c1f2cfdc4
SSDEEP 6144:FBn4JQOPcgUeR4teBdUkx5XHFbvZtddyWEalAEGBjIFiHXca6/:FB46ucZe4GUIxVpYkAXmFiHu/
TLSH
T1C02423F614C14AC5F208291EBE2B54A8DE3B07D2534781E9B14E1A9F4883FDAD9624FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AntiBan.exe

File Explorer

2_antiban.zip

.zip 217KB
AntiBan.exe

.exe 417KB

2_antiban.zip

SHA256 c54e2f49e9a1359333873daf124cb22dea99a73da31d1189d1ea0d1fcc92c521
MD5 463e0a4d66bd8063c0774af37002aad0
SHA1 efadd2fc446e1811b26b13fa382831ea6fdb3771
SHA512 07a2d56c4c9379dd48742e695275196289158043c620443297b2298e68f518a2764831f126252478254c572ec83f1c0fb609722fff68b09b9e9a1d7c1f2cfdc4
SSDEEP 6144:FBn4JQOPcgUeR4teBdUkx5XHFbvZtddyWEalAEGBjIFiHXca6/:FB46ucZe4GUIxVpYkAXmFiHu/
TLSH
T1C02423F614C14AC5F208291EBE2B54A8DE3B07D2534781E9B14E1A9F4883FDAD9624FD
MD5 SHA1 SHA512 SSDEEP TLSH

AntiBan.exe

SHA256 3ced4f849280b0cb22943e33c97cc6a48dbb9e6a4475ce6bd06e52602c18a83d
MD5 eda2f6f333699d585a8b970483f2e0a0
SHA1 c9438d6806ba2086882ea08bc442d4f5cc15f775
SHA512 902ca6ec5bfc32568888496e9ea05f3c4ac9bc312df0ffe3cf4c2312d0c140f863567122d7cafccd28f46357c774c4c649783784d0226784944ddc3365bc7f95
SSDEEP 6144:SyoowJWB/JKK8hfxwLoa47rQSdYOZOmUP74Hb9MkFTQCWR3aRq/dtGrIHW+8aAtE:DtwJWB/JKltKmUP2JTQ5/XGU2BaA7i
TLSH
T129946D66F6E08433D163297C9C1BD7E4A839BE503D2968473BF81D4C5F39782396A293
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

364036

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

352KB

Virtual Size

351KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2_antiban.zip

AntiBan.exe

generic